ConMon Security Engineer - Automation & ATO Expert

Telos Corp.; Tysons (VA); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Paid time off

Medical insurance

Dental

Vision

Tuition reimbursement

401k

Job summary

Telos Corporation in Tysons, VA is seeking a highly skilled ConMon Security Engineer to modernize and operate our Continuous Monitoring program for government-grade systems. You will bridge operational compliance with scalable automation, leveraging your ConMon, ISSO experience and eMass expertise to maintain Authorization to Operate.

The role emphasizes automating data collection, vulnerability parsing, and reporting workflows, coordinating with system owners and stakeholders, and advancing

Qualifications

• Bachelor's degree in computer science, engineering, information assurance, or related discipline with at least 5 years in IT (degree may be substituted).
• US Citizenship with an active Top Secret (TS) Clearance (Required).
• DoD 8140 compliant or certifiable (Required).
• Extensive professional experience managing the full lifecycle of Continuous Monitoring (ConMon) programs and complex cybersecurity operations for enterprise systems.
• Subject matter expertise in eMass including advanced system administration, package management, and reporting functions.
• Strong understanding of cloud security architecture and best practices.
• Proven ability to design and implement automated security solutions or scripts (e.g., Python, SQL) to modernize data collection, vulnerability parsing, and reporting workflows.
• Capability to institutionalize standardized security procedures and compliance artifacts at an organizational scale.

Responsibilities

• Execute the end-to-end monthly government submission process, ensuring all required security documentation is accurate and delivered on schedule.
• Manage and maintain system records within eMass, serving as the primary subject matter expert for data entry, reporting, and workflow management.
• Perform comprehensive parsing and analysis of vulnerability scan files (e.g., Tenable, Qualys), comparing results against historical data to identify emerging risks.
• Own the Plan of Action & Milestones (POA&M) lifecycle, including weekly tracking, stakeholder follow-up, and driving all identified vulnerabilities to remediation.
• Coordinate the collection of compliance evidence (e.g., facility access reviews, audit logs) by building strong professional relationships with system owners and stakeholders.
• We leverage automation as an enabler to modernize and scale our security operations, transforming manual data collection into streamlined, repeatable workflows.
• Spearhead the design and implementation of automated workflows to streamline recurring evidence collection and reporting tasks.
• Orchestrate the development of scripts and utilization of advanced tools to modernize the tracking of ConMon activities and data workflows.
• Conduct gap analyses on existing processes to modernize areas of improvement, particularly concerning the transition to updated regulatory frameworks such as NIST SP 800-53 Rev 5.
• Standardize security procedures and compliance artifacts at an organizational scale to ensure consistency across all enclaves.
• Author justification language and remediation instructions to provide engineering teams with clear, actionable guidance.
• Build and cultivate strong professional relationships with ConMon owners to ensure alignment on security standards and evidence requirements.
• Act as a trusted advisor to stakeholders, proactively negotiating acceptable evidence formats that can be standardized across all organizational ConMon programs.
• Communicate compliance status and remediation expectations clearly to technical and non-technical stakeholders to ensure seamless operational continuity.

Skills

Python

SQL

Automation

Threat analysis

Stakeholder management

Education

Bachelor's degree in CS/Engineering/Info Assurance

Tools

eMass

Tenable

Qualys

Job description

Telos Corporation in Tysons, VA is seeking a highly skilled ConMon Security Engineer to modernize and operate our Continuous Monitoring program for government-grade systems. You will bridge operational compliance with scalable automation, leveraging your ConMon, ISSO experience and eMass expertise to maintain Authorization to Operate.

The role emphasizes automating data collection, vulnerability parsing, and reporting workflows, coordinating with system owners and stakeholders, and advancing